CVEvulnerability
CVE-2015-5910
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• apple xcode (<= 6.4)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html Patch, Vendor Advisory
- http://www.securitytracker.com/id/1033596 www.securitytracker.com
- https://support.apple.com/HT205217 Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html Patch, Vendor Advisory
- http://www.securitytracker.com/id/1033596 www.securitytracker.com
- https://support.apple.com/HT205217 Vendor Advisory